Not rated
CVE-2022-27528 A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability
Description
A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Autodesk Navisworks | 2022.1 | No fix stated |
Other CVEs of Autodesk Navisworks
The 6 CVEs of Autodesk Navisworks →
CVE-2022-25796
A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk…
Not rated
CVE-2021-40156
A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated…
Not rated
CVE-2021-40155
A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated…
Not rated
CVE-2021-27046
A Memory Corruption vulnerability for PDF files in Autodesk Navisworks 2019, 2020, 2021, 2022 may lead to code execution…
Not rated